16 Oct
|
Zensar
|
Hyderabad
Job Summary
We are looking for a SOC Analyst (L1.5) with hands-on experience in Security Operations, Security Monitoring, Incident Response, Threat Hunting, and SIEM technologies. The ideal candidate should have exposure to Logpoint SIEM and strong experience in handling security incidents, alert triage, and threat investigations in a 24x7 SOC environment.
Candidates with robust experience in Microsoft Sentinel, Splunk, QRadar, or ArcSight along with incident response and threat hunting capabilities will also be considered.
Key Responsibilities Security Monitoring & Incident Detection
• Monitor and analyze security alerts generated from SIEM and integrated security tools.
• Perform real-time alert triage and validate security incidents.
• Investigate incidents related to malware, phishing, ransomware, insider threats, account compromise, privilege misuse, and unauthorized access.
• Escalate incidents to L2/L3 teams as per defined processes.
• Ensure adherence to incident response SLAs and SOC procedures.
Incident Response & Investigation
• Perform incident investigation and root cause analysis.
• Analyze logs from:
• Windows Servers & Workstations
• Linux Systems
• Active Directory
• Firewalls
• IDS/IPS
• EDR/XDR Solutions
• Proxy & Email Security Platforms
• Cloud Platforms (Azure, AWS, GCP)
• Support containment, eradication, recovery, and remediation activities.
• Document incidents, findings, and recommendations.
Threat Hunting & Threat Intelligence
• Perform proactive threat hunting activities.
• Utilize MITRE ATT&CK; Framework for threat mapping and analysis.
• Analyze Indicators of Compromise (IOC) and Indicators of Attack (IOA).
• Correlate threat intelligence with internal security events.
• Identify suspicious user and system behavior.
SIEM Operations
• Monitor and manage Logpoint SIEM use cases and alerts.
• Support correlation rule tuning and alert optimization.
• Create and maintain dashboards, reports, and custom searches.
📌 SOC Analyst (Hyderabad)
🏢 Zensar
📍 Hyderabad